{"id":1050,"date":"2016-10-11T03:01:56","date_gmt":"2016-10-11T03:01:56","guid":{"rendered":"http:\/\/54.201.249.27\/?p=1050"},"modified":"2016-10-11T03:01:56","modified_gmt":"2016-10-11T03:01:56","slug":"security-fatigue-may-cause-computer-users-feel-hopeless-act-recklessly","status":"publish","type":"post","link":"https:\/\/blackopspartners.com\/security-fatigue-may-cause-computer-users-feel-hopeless-act-recklessly\/","title":{"rendered":"\u201cSecurity fatigue\u201d may cause computer users to feel hopeless and act recklessly"},"content":{"rendered":"

\u201cSecurity fatigue\u201d may cause computer users to feel hopeless and act recklessly.<\/h1>\n

After updating your password for the umpteenth time, have you resorted to using one you know you\u2019ll remember because you\u2019ve used it before? Have you ever given up on an online purchase because you just didn\u2019t feel like creating a new\u00a0account?<\/p>\n

If you have done any of those things, it might be the result of \u201csecurity fatigue.\u201d It exposes online users to risk and costs businesses money in lost\u00a0customers.<\/p>\n

NIST<\/span>\u00a0says<\/a>\u00a0that\u00a0a new study<\/a>\u00a0from the National Institute of Standards and Technology (NIST<\/span>) found that a majority of the typical computer users they interviewed experienced security fatigue that often leads users to risky computing behavior at work and in their personal\u00a0lives.<\/p>\n

Security fatigue is defined in the study as a weariness or reluctance to deal with computer security. As one of the study\u2019s research subjects said about computer security, \u201cI don\u2019t pay any attention to those things anymore\u2026People get weary from being bombarded by \u2018watch out for this or watch out for\u00a0that.\u2019\u201d<\/p>\n

\u201cThe finding that the general public is suffering from security fatigue is important because it has implications in the workplace and in people\u2019s everyday life,\u201d cognitive psychologist and co-author Brian Stanton said. \u201cIt is critical because so many people bank online, and since health care and other valuable information is being moved to the\u00a0internet.\u201d<\/p>\n

\u201cIf people can\u2019t use security, they are not going to, and then we and our nation won\u2019t be secure,\u201d Stanton\u00a0said.<\/p>\n

The study, published this week in\u00a0IEEE<\/span>\u2019s\u00a0IT<\/span>\u00a0Professional<\/em><\/a>, draws on data from a qualitative study on computer users\u2019 perception and beliefs about cybersecurity and online privacy. The subjects ranged in age from their 20s to their 60s, hailed from urban, suburban and rural areas, and held a variety of\u00a0jobs.<\/p>\n

The interviews focused on the subjects\u2019 work and home computer use, specifically about online activity, including shopping and banking, computer security, security terminology, and security icons and\u00a0tools.<\/p>\n

\u201cWe weren\u2019t even looking for fatigue in our interviews, but we got this overwhelming feeling of weariness throughout all of the data,\u201d computer scientist and co-author Mary Theofanos\u00a0said.<\/p>\n

\u201cYears ago, you had one password to keep up with at work,\u201d she said. \u201cNow people are being asked to remember 25 or 30. We haven\u2019t really thought about cybersecurity expanding and what it has done to\u00a0people.\u201d<\/p>\n

The multidisciplinary team learned that the majority of their average computer users felt overwhelmed and bombarded, and they got tired of being on constant alert, adopting safe behavior, and trying to understand the nuances of online security\u00a0issues.<\/p>\n

When asked to make more computer security decisions than they are able to manage, they experience decision fatigue, which leads to security\u00a0fatigue.<\/p>\n

Researchers found that the result of weariness leads to feelings of resignation and loss of control. These reactions can lead to avoiding decisions, choosing the easiest option among alternatives, making decisions influenced by immediate motivations, behaving impulsively, and failing to follow security\u00a0rules.<\/p>\n

Comments among those who expressed feelings of security fatigue\u00a0included:<\/p>\n